CVE-2021-45614

No fix known EPSS 2%CVSS 9.6

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D7000v2 before 1.0.0.74, LAX20 before 1.1.6.28, MK62 before 1.0.6.116, MR60 before 1.0.6.116, MS60 before 1.0.6.116, RAX15 before 1.0.3.96, RAX20 before 1.0.3.96, RAX200 before 1.0.4.120, RAX45 before 1.0.3.96, RAX50 before 1.0.3.96, RAX43 before 1.0.3.96, RAX40v2 before 1.0.3.96, RAX35v2 before 1.0.3.96, RAX75 before 1.0.4.120, RAX80 before 1.0.4.120, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, RBS750 before 3.2.17.12, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12, and XR1000 before 1.0.0.58.

Published 2021-12-26 · CVE record · OSV

Products: netgear d7000v2_firmware, netgear lax20_firmware, netgear mk62_firmware, netgear mr60_firmware, netgear ms60_firmware, netgear rax15_firmware, netgear rax20_firmware, netgear rax200_firmware, netgear rax45_firmware, netgear rax50_firmware, netgear rax43_firmware, netgear rax40v2_firmware, netgear rax35v2_firmware, netgear rax75_firmware, netgear rax80_firmware, netgear rbk752_firmware, netgear rbr750_firmware, netgear rbs750_firmware, netgear rbk852_firmware, netgear rbr850_firmware, netgear rbs850_firmware, netgear xr1000_firmware